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Monitor (REPLMON), 204-205 
Active Directory Schema, 12 
attributes, 29 
classes, 29 
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namespace, 23-25 
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11, 44. See also namespace 
configuration 
forward lookup zones, 74-75 
in general, 73 
resource records, 77-80 
reverse lookup zones, 76 
root server, 73-74 
DNS name resolution 
Active Directory and 
DDNS, 62 
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models 
administrative model, 52 
business unit model, 52 
departmental model, 51 
geographic model, 51 
object model, 51 


permission inheritance, 160-161 


structuring, 251-253 
uses of, 51-52 
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replication, 11, 52 
conflicts with, 380-386 
connection objects, 37 
elements 
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RES2.LOG file, 218-219 
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RIS. See Remote Installation 
Services 
ROI. See return on investment 
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root, in namespace, 60 

root server. See also server 
DNS configuration, 73-74 

RR. See resource records 


S 
SAM. See Security Accounts 
Manager 
sample rate, counter log, 192 
scalability, Active Directory, 10 
Schema Master, discussed, 
132-134 
script 
assigning through Group Policy, 
275-279 
in general, 270 
JavaScript, 271 
overview, 270-271 
VBScript, 271 
Windows Scripting Host 
CScript, 271-272 
in general, 271 
WScript, 271 
WSF files, 274-275 
WSH 1, 272-273 
WSH 2, 273 
security. See also administration; 
auditing; permissions 
auditing 
files and folders, 398-400 
in general, 391-392 
local and domain policies, 
394-395 
policy planning, 392-394 
tattooing, 394 
for backup and restore, 228-229 
domain controller, 54, 108 
in general, 389-390 
Group Policy, configuration, 
395-398 
passwords, 270 
Remote Installation Service 
authorizing RIS server, 
355-356 
client options management 
with Group Policy, 356 
in general, 355 
RIS configuration settings, 
357-361 
Security Configuration and 
Analysis tool, 409-410 


Security Accounts Manager 
(SAM), 34, 108 
Security Log, 196-197. See also 
log file 
security template. See also 
administrative template; com- 
puter template 
in general, 16, 402 
preconfigured, 402-405 
using with GPO, 407-409 
viewing and editing, 405-407 
server. See also Domain Name 
System; Global Catalog 
Backup Domain Controller, 10 
bridgehead server, 40, 387 
caching-only name server, 65 
configuring for Active 
Directory, 88 
dcpromo.exe, 89-90 
Global Catalog, 31-32 
member server, moving, 167 
multihomed, 35 
Primary Domain Controller, 10 
root server, 73-74 
Update Sequence 
Numbers, 205 
service (SRV) records, 79-80 
shared system volume, 97-98 
signature, 177 
Simple Mail Transfer Protocol 
(SMTP), 39 
site 
creating, in general, 35-37, 
116-117 
domain controllers and, 35 
in general, 33-34, 212, 386-387 
moving domain controller 
between, 127-129, 168 
using, 34-35 
well-connected, 33, 116 
site aware, 49 
site connection, 120 
site design, 47-49 
site link 
bridges, 123-124 
creating, 38-42, 120-122 
in general, 37-38, 120 
GPO, 266 
management, 264 
properties, 39 
cost, 39 
name, 39 


schedule, 39 
transport, 39 
replication, 371 
SMS. See Microsoft Systems 
Management Server 
SOA. See Start of Authoritity 
record 
software. See also publishing 
patching, with Windows 
Installer package editor, 
329-331 
software installation. See also instal- 
lation; software management 
in general, 321 
just-in-time installation, 321, 322 
requirements for, 321-323 
snap-in use, 323 
configuration, 324-326 
software management. See also 
administration 
distribution phase, 307-308 
in general, 305-306 
installation phase, 310 
pilot phase, 308-310 
preparation phase, 306-307 
targeting phase, 308 
SRV records. See service records 
Start of Authoritity (SOA) 
record, 78, 99 
storage. See also memory 
Extensible Storage Engine, 214 
subdomain, 24, 94. See also 
domain 
subnet. See also site 
adding to Active Directory, 
118-119 
subnet mask, in DNS, 60 
System Log, 197. See also 
logging 
System Monitor. See also perfor- 
mance monitoring 
data collection 
counters, 184 
in general, 182-183 
instances, 184 
objects, 184 
system resources, 183 
disk, 180 
in general, 177-178 
logging 
alerts, 194-195 
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counter logs, 191-194 
in general, 191 
trace logs, 194 
memory, 179 
network, 180-181 
processor, 180 
terminology. See System 
Monitor terminology 
Windows Management 
Instrumentation, 202-203 
System Monitor terminology 
in general, 181 
queue, 182 
response time, 182 
throughput, 181-182 
bottleneck, 182 
system resources, 183. See also 
resource 
system state data, discussed, 
220-221 
systemroot directory, installation, 
97, 106 


T 
table 
high-watermark table, 368-369 
up-to-date vector table, 369-370 
Task Scheduler, 288, 292 
tattooing, 394 
TCO. See total cost of ownership 
template. See administrative tem- 
plate; computer template; secu- 
rity template 
TFTPD. See Trivial File Transfer 
Protocol Daemon 
TLD. See top-level domain 
tombstone lifetime, object, 225 
top-level domain (TLD), 24. See 
also domain 
total cost of ownership (TCO), 
reducing, 234, 302 
trace logs, 194. See also logging 
transaction, 214 
fully committed, 215 
rolling back, 215 
transaction log, 215. See also 
logging 
deleting, 225 
transform, Windows Installer, 312 
Trivial File Transfer Protocol 
Daemon (TFTPD), 340 
troubleshooting 
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DNS 
DNS logging, 82-83 
in general, 81-82 
nslookup, 83-84 
memory, 184-186 
processor 
in general, 186-187 
Processor Queue Length 
counter, 187 
Remote Installation Service 
authorization, 356 
trust 
in general, 10, 20 
relationships, 21-23, 49-50 
transitive, 10 


U 
up-to-date vector table, 369-370 
update 
originating update, 367 
replicated update, 367 
Update Sequence Number (USN) 
replication, 367-368 
server, 205 
user object, 8 
user template, 290. See also 
administrative template 
Control Panel, 292-293 
Desktop, 292 
in general, 290 
Network, 293 
Start Menu and Taskbar, 292 
System, 293-294 
Windows components, 291-292 
USN. See Update Sequence 
Number 


V 

VBScript, 271. See also script 

VBScript Programmer's 
Reference, 275 

VERITAS Software Console 
utility, 329 


W 
WAN. See wide area network 


wide area network (WAN), 47 
Windows 98, 2 
Windows 2000. See also Active 
Directory 
Active Directory 
in general, 4, 9 
open standards support, 10-11 
scalability, 10 
family of operating systems, 3-4 
Windows 2000 Advanced 
Server, 3 
Windows 2000 Datacenter 
Server, 4 
Windows 2000 Professional, 3 
Windows 2000 Server, 3 
new features, 4-7 
Active Directory, 4 
Active Directory Service 
Interface, 5 
disk quota support, 5 
Encrypted File System, 5 
Group Policy, 5 
Internet Connection 
Sharing, 5 
Internet Information Server, 6 
Lightweight Directory Access 
Protocol, 6 
Microsoft Management 
Console, 6 
Plug and Play, 6 
Remote Installation 
Services, 6 
Windows Media Services, 7 
Windows Scripting Host, 7 
overview, 2-3 
Windows 2000 Directory 
Services, in general, 7-8 
Windows Explorer, 291 
Windows Installer. See also 
installation; software installation 
in general, 288, 292, 310 
transforms, 312 
managing settings with Group 
Policy, 312-314 


package editor, patching soft- 
ware with, 329-331 
packages, 312 
configuration, 328-329 
creating with INSTALL LE, 
314-320 
deploying, 327-328 
technology overview, 311-312 
Windows Internet Naming 
Service (WINS), 26, 44, 62 
Windows Management 
Instrumentation (WMI), System 
Monitor and, 202-203 
Windows Media Services, 7 
Windows NT, 212 
legacy systems, 50, 109 
overview, 2 
Windows Scripting Host 
Programmer’s Reference, 275 
Windows Scripting Host 
(WSH), 7. See also script 
CScript, 271-272 
in general, 271, 273 
WScript, 271 
WSF files, 274-275 
WSH 1, 272-273 
WSH 2, 273 
WINS. See Windows Internet 
Naming Service 
WinZip, 314 
WMI. See Windows Management 
Instrumentation 
workstation, moving, 167 
WScript, 271. See also script 
WSH. See Windows 
Scripting Host 
www.domain.com, 46 
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XML. See Extensible Markup 
Language 


Z 
ZAP file, 322-323 
zones, authoritative, 64 


